Recommended approach: do not share your main StackCP credentials. Best practice access methods 1) FTP account limited to the website folder (recommended) 2) Temporary access that can be revoked quickly 3) Database credentials only if the developer must perform a migration or repair Steps (typical) 1) Websites → FTP Accounts → Create FTP account 2) Set directory access to the specific site folder only 3) Use a strong password 4) Share credentials securely (never in public chat) After work is completed - Change FTP password or remove the FTP account - Rotate database passwords if they were shared - Take a backup and confirm the website is functioning as expected